[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16730820#comment-16730820 ]
Hadoop QA commented on HADOOP-15996: ------------------------------------ | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote || Subsystem || Runtime || Comment || | {color:blue}0{color} | {color:blue} reexec {color} | {color:blue} 0m 23s{color} | {color:blue} Docker mode activated. {color} | || || || || {color:brown} Prechecks {color} || | {color:green}+1{color} | {color:green} @author {color} | {color:green} 0m 0s{color} | {color:green} The patch does not contain any @author tags. {color} | | {color:green}+1{color} | {color:green} test4tests {color} | {color:green} 0m 0s{color} | {color:green} The patch appears to include 5 new or modified test files. {color} | || || || || {color:brown} trunk Compile Tests {color} || | {color:blue}0{color} | {color:blue} mvndep {color} | {color:blue} 0m 11s{color} | {color:blue} Maven dependency ordering for branch {color} | | {color:green}+1{color} | {color:green} mvninstall {color} | {color:green} 22m 10s{color} | {color:green} trunk passed {color} | | {color:green}+1{color} | {color:green} compile {color} | {color:green} 18m 48s{color} | {color:green} trunk passed {color} | | {color:green}+1{color} | {color:green} checkstyle {color} | {color:green} 0m 59s{color} | {color:green} trunk passed {color} | | {color:green}+1{color} | {color:green} mvnsite {color} | {color:green} 1m 46s{color} | {color:green} trunk passed {color} | | {color:green}+1{color} | {color:green} shadedclient {color} | {color:green} 15m 17s{color} | {color:green} branch has no errors when building and testing our client artifacts. {color} | | {color:green}+1{color} | {color:green} findbugs {color} | {color:green} 2m 15s{color} | {color:green} trunk passed {color} | | {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 1m 25s{color} | {color:green} trunk passed {color} | || || || || {color:brown} Patch Compile Tests {color} || | {color:blue}0{color} | {color:blue} mvndep {color} | {color:blue} 0m 11s{color} | {color:blue} Maven dependency ordering for patch {color} | | {color:green}+1{color} | {color:green} mvninstall {color} | {color:green} 1m 11s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} compile {color} | {color:green} 14m 55s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} javac {color} | {color:green} 14m 55s{color} | {color:green} the patch passed {color} | | {color:orange}-0{color} | {color:orange} checkstyle {color} | {color:orange} 1m 2s{color} | {color:orange} hadoop-common-project: The patch generated 7 new + 276 unchanged - 1 fixed = 283 total (was 277) {color} | | {color:green}+1{color} | {color:green} mvnsite {color} | {color:green} 1m 44s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} whitespace {color} | {color:green} 0m 0s{color} | {color:green} The patch has no whitespace issues. {color} | | {color:green}+1{color} | {color:green} xml {color} | {color:green} 0m 2s{color} | {color:green} The patch has no ill-formed XML file. {color} | | {color:red}-1{color} | {color:red} shadedclient {color} | {color:red} 11m 58s{color} | {color:red} patch has errors when building and testing our client artifacts. {color} | | {color:green}+1{color} | {color:green} findbugs {color} | {color:green} 2m 32s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 1m 26s{color} | {color:green} the patch passed {color} | || || || || {color:brown} Other Tests {color} || | {color:red}-1{color} | {color:red} unit {color} | {color:red} 3m 22s{color} | {color:red} hadoop-auth in the patch failed. {color} | | {color:red}-1{color} | {color:red} unit {color} | {color:red} 7m 3s{color} | {color:red} hadoop-common in the patch failed. {color} | | {color:green}+1{color} | {color:green} asflicense {color} | {color:green} 0m 38s{color} | {color:green} The patch does not generate ASF License warnings. {color} | | {color:black}{color} | {color:black} {color} | {color:black}108m 32s{color} | {color:black} {color} | \\ \\ || Reason || Tests || | Failed junit tests | hadoop.security.authentication.client.TestKerberosAuthenticator | | | hadoop.io.file.tfile.TestVLong | | | hadoop.util.TestApplicationClassLoader | | | hadoop.io.file.tfile.TestTFileByteArrays | | | hadoop.fs.TestAvroFSInput | | | hadoop.fs.viewfs.TestViewFileSystemDelegation | | | hadoop.fs.TestDefaultUri | | | hadoop.fs.viewfs.TestFcPermissionsLocalFs | | | hadoop.fs.viewfs.TestViewFsURIs | | | hadoop.fs.shell.TestCopy | | | hadoop.fs.shell.TestCopyFromLocal | | | hadoop.fs.shell.TestPathData | | | hadoop.ha.TestHealthMonitor | | | hadoop.fs.TestGetFileBlockLocations | | | hadoop.fs.contract.rawlocal.TestRawlocalContractSetTimes | | | hadoop.http.TestHttpServer | | | hadoop.security.token.delegation.web.TestDelegationTokenAuthenticationHandlerWithMocks | | | hadoop.fs.TestChecksumFileSystem | | | hadoop.crypto.key.TestKeyProviderFactory | | | hadoop.security.authorize.TestProxyUsers | | | hadoop.security.token.delegation.web.TestDelegationTokenManager | | | hadoop.fs.TestHarFileSystemBasics | | | hadoop.io.TestSetFile | | | hadoop.fs.contract.rawlocal.TestRawlocalContractDelete | | | hadoop.fs.contract.localfs.TestLocalFSContractSeek | | | hadoop.fs.contract.rawlocal.TestRawlocalContractPathHandle | | | hadoop.fs.TestTruncatedInputBug | | | hadoop.fs.TestFSMainOperationsLocalFileSystem | | | hadoop.fs.contract.localfs.TestLocalFSContractSetTimes | | | hadoop.fs.TestPath | | | hadoop.util.TestGenericOptionsParser | | | hadoop.metrics2.sink.TestRollingFileSystemSink | | | hadoop.security.TestRaceWhenRelogin | | | hadoop.crypto.key.TestKeyShell | | | hadoop.io.file.tfile.TestTFile | | | hadoop.fs.sftp.TestSFTPFileSystem | | | hadoop.fs.contract.rawlocal.TestRawlocalContractAppend | | | hadoop.ipc.TestProtoBufRPCCompatibility | | | hadoop.fs.viewfs.TestViewfsFileStatus | | | hadoop.fs.TestTrash | | | hadoop.fs.TestLocalDirAllocator | | | hadoop.security.alias.TestCredShell | | | hadoop.ipc.TestIdentityProviders | | | hadoop.ipc.TestIPCServerResponder | | | hadoop.fs.TestFileContextResolveAfs | | | hadoop.io.TestMapFile | | | hadoop.fs.shell.TestCopyPreserveFlag | | | hadoop.cli.TestCLI | | | hadoop.crypto.key.TestKeyProviderCryptoExtension | | | hadoop.fs.TestFsShellCopy | | | hadoop.io.file.tfile.TestTFileSplit | | | hadoop.ipc.TestAsyncIPC | | | hadoop.fs.TestFsShell | | | hadoop.io.TestBloomMapFile | | | hadoop.fs.shell.find.TestName | | | hadoop.io.TestSecureIOUtils | | | hadoop.fs.contract.localfs.TestLocalFSContractOpen | | | hadoop.io.file.tfile.TestTFileComparators | | | hadoop.fs.contract.localfs.TestLocalFSContractMkdir | | | hadoop.crypto.TestCryptoStreamsForLocalFS | | | hadoop.fs.shell.TestTextCommand | | | hadoop.fs.shell.TestCount | | | hadoop.io.file.tfile.TestTFileStreams | | | hadoop.fs.viewfs.TestViewFsTrash | | | hadoop.ipc.TestRPCServerShutdown | | | hadoop.fs.viewfs.TestFcCreateMkdirLocalFs | | | hadoop.fs.contract.rawlocal.TestRawlocalContractMkdir | | | hadoop.metrics2.sink.TestRollingFileSystemSinkWithLocal | | | hadoop.fs.contract.localfs.TestLocalFSContractRename | | | hadoop.fs.contract.localfs.TestLocalFSContractDelete | | | hadoop.fs.viewfs.TestFcMainOperationsLocalFs | | | hadoop.ipc.TestRPCWaitForProxy | | | hadoop.ha.TestZKFailoverController | | | hadoop.fs.viewfs.TestFSMainOperationsLocalFileSystem | | | hadoop.security.token.TestDtUtilShell | | | hadoop.fs.TestRawLocalFileSystemContract | | | hadoop.security.authorize.TestAccessControlList | | | hadoop.security.ssl.TestSSLFactory | | | hadoop.fs.shell.find.TestPrint0 | | | hadoop.io.TestSequenceFile | | | hadoop.io.nativeio.TestNativeIO | | | hadoop.io.file.tfile.TestTFileNoneCodecsByteArrays | | | hadoop.fs.viewfs.TestViewFileSystemDelegationTokenSupport | | | hadoop.security.TestUserFromEnv | | | hadoop.security.TestFixKerberosTicketOrder | | | hadoop.io.file.tfile.TestTFileUnsortedByteArrays | | | hadoop.fs.shell.TestXAttrCommands | | | hadoop.ipc.TestMiniRPCBenchmark | | | hadoop.fs.shell.find.TestIname | | | hadoop.io.file.tfile.TestTFileSeek | | | hadoop.io.TestSequenceFileSync | | | hadoop.fs.TestLocalFSFileContextCreateMkdir | | | hadoop.crypto.key.TestKeyProviderDelegationTokenExtension | | | hadoop.ipc.TestRPC | | | hadoop.fs.TestFcLocalFsUtil | | | hadoop.fs.TestStat | | | hadoop.fs.contract.rawlocal.TestRawlocalContractSeek | | | hadoop.ipc.TestProtoBufRpc | | | hadoop.fs.http.TestHttpFileSystem | | | hadoop.fs.shell.find.TestFind | | | hadoop.util.TestDiskChecker | | | hadoop.fs.TestLocalFSFileContextMainOperations | | | hadoop.security.TestKDiag | | | hadoop.io.TestSequenceFileAppend | | | hadoop.util.TestBasicDiskValidator | | | hadoop.fs.contract.localfs.TestLocalFSContractGetFileStatus | | | hadoop.security.alias.TestCredentialProviderFactory | | | hadoop.ipc.TestIPC | | | hadoop.fs.contract.localfs.TestLocalFSContractAppend | | | hadoop.ipc.TestMultipleProtocolServer | | | hadoop.fs.viewfs.TestChRootedFs | | | hadoop.security.token.delegation.TestZKDelegationTokenSecretManager | | | hadoop.fs.TestFsShellReturnCode | | | hadoop.fs.TestLocalFsFCStatistics | | | hadoop.io.file.tfile.TestTFileNoneCodecsStreams | | | hadoop.fs.TestSymlinkLocalFSFileContext | | | hadoop.fs.viewfs.TestViewFileSystemLocalFileSystem | | | hadoop.fs.contract.localfs.TestLocalFSContractLoaded | | | hadoop.security.TestUGIWithMiniKdc | | | hadoop.fs.shell.find.TestPrint | | | hadoop.fs.contract.rawlocal.TestRawlocalContractOpen | | | hadoop.io.file.tfile.TestTFileComparator2 | | | hadoop.ipc.TestSaslRPC | | | hadoop.util.TestRunJar | | | hadoop.fs.viewfs.TestViewFsWithAuthorityLocalFs | | | hadoop.fs.TestLocalFileSystemPermission | | | hadoop.security.TestJNIGroupsMapping | | | hadoop.ipc.TestRPCCallBenchmark | | | hadoop.fs.shell.TestMove | | | hadoop.fs.shell.TestLs | | | hadoop.io.file.tfile.TestTFileJClassComparatorByteArrays | | | hadoop.ha.TestHealthMonitorWithDedicatedHealthAddress | | | hadoop.security.TestKDiagNoKDC | | | hadoop.fs.viewfs.TestViewFsConfig | | | hadoop.fs.contract.localfs.TestLocalFSContractCreate | | | hadoop.fs.TestListFiles | | | hadoop.fs.contract.rawlocal.TestRawlocalContractRename | | | hadoop.security.TestUserGroupInformation | | | hadoop.security.authorize.TestServiceAuthorization | | | hadoop.fs.TestFsShellTouch | | | hadoop.fs.TestFileUtil | | | hadoop.fs.contract.localfs.TestLocalFSContractMultipartUploader | | | hadoop.security.TestDoAsEffectiveUser | | | hadoop.fs.TestFcLocalFsPermission | | | hadoop.util.TestNodeHealthScriptRunner | | | hadoop.io.file.tfile.TestTFileNoneCodecsJClassComparatorByteArrays | | | hadoop.ha.TestZKFailoverControllerStress | | | hadoop.fs.viewfs.TestViewFileSystemWithAuthorityLocalFileSystem | | | hadoop.fs.contract.rawlocal.TestRawlocalContractCreate | | | hadoop.fs.viewfs.TestChRootedFileSystem | | | hadoop.fs.TestFileContext | | | hadoop.ipc.TestReuseRpcConnections | | | hadoop.security.token.delegation.web.TestWebDelegationToken | | | hadoop.fs.viewfs.TestViewFsLocalFs | | | hadoop.util.TestJsonSerialization | | | hadoop.security.TestProxyUserFromEnv | | | hadoop.fs.TestLocalFileSystem | | | hadoop.io.TestSequenceFileSerialization | | | hadoop.fs.contract.rawlocal.TestRawlocalContractGetFileStatus | | | hadoop.io.TestArrayFile | | | hadoop.conf.TestConfiguration | | | hadoop.fs.shell.TestAclCommands | | | hadoop.fs.TestFilterFs | | | hadoop.ipc.TestProtoBufRpcServerHandoff | | | hadoop.security.TestSecurityUtil | | | hadoop.fs.TestFsShellList | | | hadoop.fs.TestFileContextDeleteOnExit | | | hadoop.security.TestUGILoginFromKeytab | | | hadoop.io.file.tfile.TestTFileSeqFileComparison | | | hadoop.io.compress.TestCodec | | | hadoop.log.TestLogLevel | | | hadoop.security.TestLdapGroupsMapping | | | hadoop.fs.TestSymlinkLocalFSFileSystem | | | hadoop.ipc.TestServer | | | hadoop.ipc.TestRpcServerHandoff | \\ \\ || Subsystem || Report/Notes || | Docker | Client=17.05.0-ce Server=17.05.0-ce Image:yetus/hadoop:8f97d6f | | JIRA Issue | HADOOP-15996 | | JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12953321/HADOOP-15996.0008.patch | | Optional Tests | dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient findbugs checkstyle xml | | uname | Linux 38896ee2249f 4.4.0-138-generic #164~14.04.1-Ubuntu SMP Fri Oct 5 08:56:16 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux | | Build tool | maven | | Personality | /testptch/patchprocess/precommit/personality/provided.sh | | git revision | trunk / e9a005d | | maven | version: Apache Maven 3.3.9 | | Default Java | 1.8.0_191 | | findbugs | v3.1.0-RC1 | | checkstyle | https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/artifact/out/diff-checkstyle-hadoop-common-project.txt | | unit | https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/artifact/out/patch-unit-hadoop-common-project_hadoop-auth.txt | | unit | https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/artifact/out/patch-unit-hadoop-common-project_hadoop-common.txt | | Test Results | https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/testReport/ | | Max. process+thread count | 1585 (vs. ulimit of 10000) | | modules | C: hadoop-common-project/hadoop-auth hadoop-common-project/hadoop-common U: hadoop-common-project | | Console output | https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/console | | Powered by | Apache Yetus 0.8.0 http://yetus.apache.org | This message was automatically generated. > Plugin interface to support more complex usernames in Hadoop > ------------------------------------------------------------ > > Key: HADOOP-15996 > URL: https://issues.apache.org/jira/browse/HADOOP-15996 > Project: Hadoop Common > Issue Type: New Feature > Components: security > Reporter: Eric Yang > Assignee: Bolke de Bruin > Priority: Major > Attachments: 0001-HADOOP-15996-Make-auth-to-local-configurable.patch, > 0001-Make-allowing-or-configurable.patch, > 0001-Simple-trial-of-using-krb5.conf-for-auth_to_local-ru.patch, > 0002-HADOOP-15996-Make-auth-to-local-configurable.patch, > 0003-HADOOP-15996-Make-auth-to-local-configurable.patch, > 0004-HADOOP-15996-Make-auth-to-local-configurable.patch, > 0005-HADOOP-15996-Make-auth-to-local-configurable.patch, > HADOOP-15996.0005.patch, HADOOP-15996.0006.patch, HADOOP-15996.0007.patch, > HADOOP-15996.0008.patch > > > Hadoop does not allow support of @ character in username in recent security > mailing list vote to revert HADOOP-12751. Hadoop auth_to_local rule must > match to authorize user to login to Hadoop cluster. This design does not > work well in multi-realm environment where identical username between two > realms do not map to the same user. There is also possibility that lossy > regex can incorrectly map users. In the interest of supporting multi-realms, > it maybe preferred to pass principal name without rewrite to uniquely > distinguish users. This jira is to revisit if Hadoop can support full > principal names without rewrite and provide a plugin to override Hadoop's > default implementation of auth_to_local for multi-realm use case. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org